Enable Tpm/Tcm - Lenovo 7X18 Maintenance Manual

Example commands are as follows:
onecli config set SYSTEM_PROD_DATA.SysInfoProdName <m/t_model> −−bmc <xcc_user_id>:<xcc_
password>@<xcc_external_ip>
onecli config set SYSTEM_PROD_DATA.SysInfoSerialNum <s/n> −−bmc <xcc_user_id>:<xcc_
password>@<xcc_external_ip>
onecli config set SYSTEM_PROD_DATA.SysInfoProdIdentifier <system model> −−bmc xcc_user_id:xcc_
password@xcc_external_ip
onecli config set SYSTEM_PROD_DATA.SysInfoProdIdentifierEx <system model> --override −−bmc xcc_
user_id:xcc_password@xcc_external_ip
4. Reset the Lenovo XClarity Controller to the factory defaults. See "Resetting the BMC to Factory
Default" section in the XCC documentation compatible with your server at
sysmgt.lenovofiles.com/help/topic/lxcc_frontend/lxcc_overview.html

Enable TPM/TCM

The server supports Trusted Platform Module (TPM), Version 1.2 or Version 2.0
Note: For customers in Chinese Mainland, integrated TPM is not supported. However, customers in Chinese
Mainland can install a Trusted Cryptographic Module (TCM) adapter or a NationZ TPM adapter (sometimes
called a daughter card). Customers in Chinese Mainland should download Lenovo Business Vantage to
enable TCM. For more information, see
18alenovo_business_vantage_-release_letter-_20171205_v221770130-for-unknown-os
download.lenovo.com/servers/mig/2021/02/09/43299/LBV_v2.2.177.0130_readme_20180903.txt
When a system board is replaced, you must make sure that the TPM/TCM policy is set correctly.
CAUTION:
Take special care when setting the TPM/TCM policy. If it is not set correctly, the system board can
become unusable.
Set the TPM policy
By default, a replacement system board is shipped with the TPM policy set to undefined. You must modify
this setting to match the setting that was in place for the system board that is being replaced.
There are two methods available to set the TPM policy:
• From Lenovo XClarity Provisioning Manager
To set the TPM policy from Lenovo XClarity Provisioning Manager:
1. Start the server and press the key according to the on-screen instructions to display the Lenovo
XClarity Provisioning Manager interface.
2. If the power-on Administrator password is required, enter the password.
3. From the System Summary page, click Update VPD.
4. Set the policy to one of the following settings.
– NationZ TPM 2.0 enabled - China only. Customers in the Chinese Mainland should choose this
setting if a NationZ TPM 2.0 adapter is installed.
– TPM enabled - ROW. Customers outside of the Chinese Mainland should choose this setting.
– Permanently disabled. Customers in the Chinese Mainland should use this setting if no TPM
adapter is installed.
Note: Although the setting undefined is available as a policy setting, it should not be used.
• From Lenovo XClarity Essentials OneCLI
ThinkSystem SR850 Maintenance Manual
136
https://datacentersupport.lenovo.com/en/en/downloads/ds548665-
https://
.
and
https://
.